diff options
author | nopesled <x86sec@yahoo.ie> | 2016-07-07 18:48:22 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2016-07-07 18:48:22 +0200 |
commit | 85eaa0bff12574b8a1c08b68942ff070e6bb341c (patch) | |
tree | 6825fe98264d0082232caec13314b27db1abad41 /system/helpers | |
parent | 64d9d1ec12be9f02459a5e5c8a9124fc97686529 (diff) |
Update path_helper.php
Diffstat (limited to 'system/helpers')
-rw-r--r-- | system/helpers/path_helper.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/system/helpers/path_helper.php b/system/helpers/path_helper.php index f3757affb..18e175093 100644 --- a/system/helpers/path_helper.php +++ b/system/helpers/path_helper.php @@ -61,7 +61,7 @@ if ( ! function_exists('set_realpath')) function set_realpath($path, $check_existance = FALSE) { // Security check to make sure the path is NOT a URL. No remote file inclusion! - if (preg_match('#^(http:\/\/|https:\/\/|www\.|ftp|php)#i', $path) OR filter_var($path, FILTER_VALIDATE_IP) === $path ) + if (preg_match('#^(http:\/\/|https:\/\/|www\.|ftp|php:\/\/)#i', $path) OR filter_var($path, FILTER_VALIDATE_IP) === $path ) { show_error('The path you submitted must be a local server path, not a URL'); } |